Wrest Point Casino Privacy Policy

This privacy policy sets out how personal information is collected, used, disclosed and protected by Wrest Point Hotel Casino, operated by Federal Group, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Scope and Application

This policy applies to all personal information collected by Wrest Point Casino through:

• premises located at 410 Sandy Bay Road, Sandy Bay, Tasmania 7005
• the website wrestpoint.com.au
• any associated services provided in connection with these operations.

For the purposes of this policy, Federal Group acts as the data controller in relation to personal information collected through these activities.

2. Information Collected

Personal information is collected directly from users when they engage with services provided by Wrest Point Casino or Federal Group. The types of information collected include:

• name
• residential and postal address
• date of birth
• telephone numbers
• email addresses
• government-issued identification numbers
• credit card and other payment details
• photographic identification documents
• images and footage captured through video surveillance systems
• loyalty program membership details and transaction history
• gaming activity records
• preferences and feedback provided by the user
• correspondence and communications with staff.

Collection of this information occurs in particular when a user:

• books accommodation
• uses gaming facilities, including table games or gaming machines
• registers for club membership or loyalty programs
• participates in promotional activities or events
• attends convention and meeting facilities
• makes reservations or deposits
• contacts the casino or Federal Group for support or inquiries
• enters restricted areas subject to regulatory requirements.

3. Legal Basis for Collection

Personal information is collected where necessary to:

• provide services requested by the user
• fulfill contractual obligations, including reservation guarantees and deposit requirements
• comply with legal and regulatory obligations under Tasmanian gambling legislation and the Tasmanian Gambling Exclusion Scheme
• maintain security and safety of premises and patrons, including through surveillance systems
• verify identity and age for access to gaming areas
• process payments and financial transactions.

In some circumstances, legal obligations require collection of additional information beyond that directly provided by the user.

4. Use and Disclosure of Personal Information

Personal information is used for the following purposes:

• provision of accommodation, gaming and entertainment services
• processing of bookings and reservations
• administration of loyalty programs and club memberships
• fulfillment of deposit and payment obligations
• compliance with regulatory reporting and exclusion requirements
• maintenance of security through facial recognition technology and video surveillance
• response to inquiries, complaints and feedback
• internal business operations and record-keeping.

Personal information is not disclosed to third parties except:

• where required or authorised by law
• where necessary to provide services requested by the user
• where the user has provided explicit consent to the disclosure.

Access to personal information is restricted to authorised personnel who require such access for legitimate business purposes.

5. Data Retention

Personal information is retained for as long as necessary to:

• fulfill the purposes for which it was collected
• meet contractual obligations
• comply with legal and regulatory retention requirements
• resolve disputes.

Retention periods vary depending on the nature of the information and the applicable legal and regulatory obligations.

6. Security Measures

Reasonable physical, technical and administrative measures are implemented to protect personal information from misuse, loss, unauthorised access, modification or disclosure. Access to personal information is restricted to authorised personnel who require it for legitimate business purposes.

Video surveillance operates continuously throughout premises associated with Wrest Point Casino for security and regulatory compliance purposes. Facial recognition technology is used to enforce exclusion orders under the Tasmanian Gambling Exclusion Scheme.

Systems are protected against unauthorised access. However, no system can be fully protected against all security incidents. In April, Federal Group experienced a ransomware cyber-attack affecting hotel booking systems at Wrest Point Casino and Country Club Casino, resulting in temporary operational disruptions.

7. Your Rights

Under Australian Privacy Principles 12 and 13, individuals have the right to:

• request access to personal information held about them
• request correction of inaccurate, out-of-date or incomplete personal information
• withdraw consent where processing is based on consent
• lodge a complaint regarding the handling of their personal information.

7.1. Access and Correction Requests

Requests for access to or correction of personal information should be directed to Federal Group using the contact details set out in section 9 of this policy. A response will be provided within 30 days of receipt of the request. Verification of identity may be required before an access or correction request is processed.

If a request for access or correction is refused, written reasons for the refusal will be provided, together with information about available complaint mechanisms.

8. Deposit and Reservation Requirements

Accommodation reservations require a deposit equivalent to one night’s accommodation, payable immediately upon booking. Reservations are guaranteed with a valid credit card. Collection and processing of payment information for these purposes form part of the contractual terms between the user and the accommodation provider.

9. Contact Information

For privacy-related inquiries, access requests, correction requests or complaints in relation to this policy or the handling of personal information, contact Federal Group on 1800 858 858.

10. Policy Updates

This privacy policy may be updated periodically to reflect changes in practices, legal requirements or operational needs. The current version is dated September 2025. Continued use of services following publication of any updated version constitutes acceptance of the revised terms.

11. Third-Party Services

The website wrestpoint.com.au may use third-party services, including reCAPTCHA. Use of such services is subject to the privacy policies and terms of service of the relevant third-party providers, including Google’s Privacy Policy and Terms of Service. Wrest Point Casino and Federal Group are not responsible for the privacy practices of third-party service providers.

12. Regulatory Compliance

Operations are conducted in compliance with the Tasmanian Gambling Exclusion Scheme and other applicable regulatory requirements. Personal information may be disclosed to regulators and other authorised bodies where legally mandated or necessary to enforce exclusion orders and maintain responsible gaming standards.